diff --git a/.github/workflows/secret-scan.yml b/.github/workflows/secret-scan.yml
index c6772cd..0fd45f0 100644
--- a/.github/workflows/secret-scan.yml
+++ b/.github/workflows/secret-scan.yml
@@ -40,7 +40,7 @@ jobs:
           /tmp/gitleaks git --redact --verbose --exit-code 1 .
 
       - name: trivy secret scan (ignore-agnostic working tree)
-        uses: aquasecurity/trivy-action@dc5a429b52fcf669ce959baa2c2dd26090d2a6c4  # v0.32.0
+        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25  # v0.36.0
         with:
           scan-type: fs
           scanners: secret